Remove DyFuCa. Description and removal instructions

 
Title: DyFuCa
Also known as: Downloader.Dyfuca, TrojanDownloader.Win32.Dyfuca
Type: Dialers
Severity scale:DyFuCa severity is 20  (20 / 100)
 
Dyfuca is a dialer, which runs at startup and dials to porn servers. This will lead to your phone line being charged expensive rates. Dyfuca may be spread as an Internet Optimizer Utility via the Internet. This program is also suspected of being able to download more spyware or other malware on your computer.

Dyfuca is a threat and as such should be removed upon detection.


Related files: Wsem.dll, stmtdlr.exe, COMEDY.EXE, NEM211.DLL, optimize.exe, VIEW-M~1.EXE, actalert.exe

DyFuCa properties:
• Hides from the user
• Stays resident in background

Automatic DyFuCa removal:

remover for DyFuCa

DyFuCa manual removal:

Kill processes:
actalert.exe, msbb.exe, optimize.exe, saie.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4}
'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4}

Delete files:
Wsem.dll, stmtdlr.exe, COMEDY.EXE, NEM211.DLL, OPTIMIZE.EXE, VIEW-M~1.EXE, actalert.exe
Delete directories:
\DyFuCA

Other programs to remove DyFuCa:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 19/03/04
Information updated: 27/08/08

Additional resources related to DyFuCa:

Attention: If you know or you have a website or page about DyFuCa removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about DyFuCa parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. re: comment about DyFuCa by rachael. 2005-03-27 11:03:20
i dont want to mess up my laptop by deleting important files so i would like to check somthing.

do we delete these files:
Wsem.dll, stmtdlr.exe, COMEDY.EXE, NEM211.DLL, OPTIMIZE.EXE, VIEW-M~1.EXE, actalert.exe

2. re: comment about DyFuCa by Guest. 2005-03-21 11:03:10
its really anooying

3. re: comment about DyFuCa by Fred. 2005-02-02 22:02:09
DyFuCa has been deleted long time ago on my PC. But recently I installed a new Antivirus (kaspersky) and it found a part of this old virus. When I deleted a file named Wsem114.dll, it resulted in Reseting my PC each time I connect my modem on the Internet, just after my Password is confirmed by my ISP. What is this bug?? Dyfuca was necessary to connect me over Internet?? Please HEEEEELLP!!

4. Removing DyFuCa by Guest. 2004-12-16 15:12:18
I sent the company an email telling them I wanted this off my machine. These are the instructions that I received:

To remove the program, please follow these directions:

Open your Control Panel (you should be able to find this in your Start Menu, either on its own or under Settings).
Open Add/Remove Programs. This brings up a list of programs installed on your computer. Notice the scroll bar (may not appear if you have very few programs installed) You may need to scroll through this list to view all your installed programs.
Scroll down until you see the program you wish to remove, click on it to highlight and choose Remove or Add/Remove. The two programs are Internet Optimizer and Active Alert.
Follow any additional screen directions.


If you are still having trouble uninstalling the program, you may need to delete the dll file manually. To do this, first close all browser windows, reboot your computer, and then search for these files:
C:windowsiopti130.dll
C:windowsnem2*.dll

From here, you can rename, move, or delete these two files.
If you cannot delete them, you may have to rename the file to something.dll.old and then reboot, then remove the something.dll.old file.


If you can't rename or delete the file, you may need to close all windows and folders, kill "explorer.exe" from task manager, and delete the file from the dos prompt. Please follow these instructions to do so:

Close all browser windows and folders. Hold down Ctrl-Alt-Del to open the task manager. Select "explorer.exe" and end the process. If you see "iexplore.exe" in the list, end that process as well.
Open the dos prompt. If you're using Windows XP, this will be in your Start menu > All programs > Accessories > Command prompt.
To delete a file, type "del" followed by the file location, then hit your enter key. For example: del C:windowsiopti130.dll Once you have done this, you can type "explorer.exe" at the dos prompt to get explorer back.


Related news:
Similar parasites:
Related articles:
Related discussions: